$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft File: A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft (raw, json) Hash identifier: dLM+DhWlWm/HrLckfpxgUo7tQ97+MjoxtlvOEnzH6w0= Subject key identifier: 5B:5E:FF:6B:38:FA:13:C0:05:49:37:D3:29:E7:7D:19:28:25:E9:16 Authority key identifier: A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 Certificate issuer: /CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Certificate serial: 4AEC8F1E7918B93099E63EACE5ECE0F0B077F0E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft Manifest number: E6 Signing time: Tue 20 Oct 2026 17:20:52 +0000 Manifest this update: Tue 20 Oct 2026 17:15:52 +0000 Manifest next update: Wed 21 Oct 2026 17:22:52 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: 9QZ4zyqSjuEvfgjJyJcGuDYRra6HiDhsRoStARqfwRU=) 2: A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl (hash: 3JDVgKXSXAHqFQkOl6OeIxbyyHud/1hC11LUqpBCVh0=) 3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: t5qlWMCg2l2O2xAA9OrAnjww8OOdg9aeZk/sDXkOKPY=) 4: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: rrzxlF06KjaeWOab2SfdeYXEnvubBNLCq3WZSBYMU7k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 17:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ec:8f:1e:79:18:b9:30:99:e6:3e:ac:e5:ec:e0:f0:b0:77:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Validity Not Before: Oct 20 17:15:52 2026 GMT Not After : Oct 21 17:22:52 2026 GMT Subject: CN=5B5EFF6B38FA13C0054937D329E77D192825E916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:cc:db:b0:cc:94:1b:f0:31:74:ea:54:ee: d4:15:93:52:70:7b:32:37:be:d1:7c:40:da:9e:1c: c0:35:4f:70:26:c5:d3:86:cc:e8:a6:0a:69:a1:69: 3f:eb:e4:7f:3a:22:11:f8:15:d1:54:a8:a8:ea:12: 32:dc:56:4e:78:22:82:a0:46:43:bf:69:e8:06:f9: 2d:60:02:e0:39:86:f5:24:b2:f4:d2:91:86:72:37: a0:eb:3e:3f:c7:47:93:9e:17:ba:42:b4:4b:da:1d: 50:d0:1e:c6:80:9b:64:a4:c0:4a:c8:77:31:22:84: 60:31:8c:cf:6c:91:c3:2e:ac:24:70:e6:32:0e:1c: 99:5b:1e:ad:8c:96:de:78:7a:48:cf:5d:ad:06:ef: 60:a7:81:86:d9:eb:30:e5:6f:97:49:e0:90:d6:69: f2:f8:06:82:5a:33:6e:ef:0e:15:83:4d:89:f3:22: b3:d9:2c:1b:c0:e3:5c:c4:92:87:de:28:7a:48:77: 56:e5:b7:51:bb:4d:03:f6:ee:08:21:d0:e5:a4:1d: 94:89:4c:2b:3d:c1:ee:dc:c4:8c:cd:15:de:47:de: fe:f2:87:22:7f:f2:03:33:2a:47:b5:cb:a2:a9:c3: bc:1a:57:81:e6:3d:ed:78:8e:87:a2:33:0b:9b:dc: 8b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5E:FF:6B:38:FA:13:C0:05:49:37:D3:29:E7:7D:19:28:25:E9:16 X509v3 Authority Key Identifier: keyid:A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:6c:0b:73:3d:1a:23:46:ee:62:cd:53:94:57:c1:bc:0b:ff: 12:10:76:e7:de:6b:c4:0d:9c:fd:6b:ad:3f:98:e6:51:e6:73: 99:c2:ca:d5:27:43:42:e8:3d:de:d4:44:99:1e:77:0b:4d:d5: 52:2e:f9:72:14:72:c9:bf:37:96:04:a2:85:4c:a5:05:40:9a: b6:63:60:8c:ad:61:4c:ef:11:2c:f3:e0:11:12:d3:93:b4:32: 23:39:97:60:0c:a9:97:a6:7e:10:30:dd:32:be:a8:36:26:72: 6b:b3:37:cd:d8:58:41:ed:62:a7:9d:03:1e:0a:d0:d2:22:11: 4c:33:6e:36:76:05:27:10:1b:a2:a1:b0:4d:e4:43:75:f0:0b: 5b:e5:8c:8f:c5:40:ad:64:3e:93:9c:a5:8e:a2:1a:b7:c1:e9: 15:98:5f:dc:d4:0c:c2:c8:fe:2e:8d:17:78:7e:98:bf:94:db: 6f:46:05:c7:90:49:7f:fa:db:4b:95:83:b3:fc:e1:bc:08:7d: 1b:ff:e5:c1:ac:9f:44:2f:79:ed:66:fc:4e:9d:20:45:a5:0c: 6a:7d:d8:27:d9:28:a0:c4:b4:fc:b7:56:65:b1:ff:cc:a7:f1: 9a:e4:d4:6c:8b:b1:07:65:79:fa:2c:81:79:20:b9:e1:d7:09: af:15:4a:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuyPHnkYuTCZ5j6s5ezg8LB38OAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUx NDUxMTMzNTAeFw0yNjEwMjAxNzE1NTJaFw0yNjEwMjExNzIyNTJaMDMxMTAvBgNV BAMTKDVCNUVGRjZCMzhGQTEzQzAwNTQ5MzdEMzI5RTc3RDE5MjgyNUU5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1S8zbsMyUG/AxdOpU7tQVk1Jw ezI3vtF8QNqeHMA1T3AmxdOGzOimCmmhaT/r5H86IhH4FdFUqKjqEjLcVk54IoKg RkO/aegG+S1gAuA5hvUksvTSkYZyN6DrPj/HR5OeF7pCtEvaHVDQHsaAm2SkwErI dzEihGAxjM9skcMurCRw5jIOHJlbHq2Mlt54ekjPXa0G72CngYbZ6zDlb5dJ4JDW afL4BoJaM27vDhWDTYnzIrPZLBvA41zEkofeKHpId1blt1G7TQP27ggh0OWkHZSJ TCs9we7cxIzNFd5H3v7yhyJ/8gMzKke1y6Kpw7waV4HmPe14joeiMwub3IsxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW17/azj6E8AFSTfTKed9GSgl6RYwHwYDVR0j BBgwFoAUo+z5Fpis0lxO+1bDm3f49RRREzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU4ZDU4YTgtZTE5Ny00MTc5LWI3M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5 OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUxNDUxMTMzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BM0VDRjkxNjk4QUNEMjVDNEVGQjU2QzM5Qjc3RjhGNTE0NTEx MzM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4 RjUxNDUxMTMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFsC3M9GiNG7mLNU5RXwbwL/xIQdufea8QN nP1rrT+Y5lHmc5nCytUnQ0LoPd7URJkedwtN1VIu+XIUcsm/N5YEooVMpQVAmrZj YIytYUzvESzz4BES05O0MiM5l2AMqZemfhAw3TK+qDYmcmuzN83YWEHtYqedAx4K 0NIiEUwzbjZ2BScQG6KhsE3kQ3XwC1vljI/FQK1kPpOcpY6iGrfB6RWYX9zUDMLI /i6NF3h+mL+U229GBceQSX/620uVg7P84bwIfRv/5cGsn0Qvee1m/E6dIEWlDGp9 2CfZKKDEtPy3VmWx/8yn8Zrk1GyLsQdlefosgXkgueHXCa8VSgo= -----END CERTIFICATE-----Generated at Wed Oct 21 03:30:29 2026 by rpki-client